Malicious code in dt-retag-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d21deb5c26c8d9b0043ce26b0fe5ec1625607ab1e1c37102589f92ab7187364 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ai-audio-descriptions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebf35a4094455afefae874d2367ecf96babc419a5ff8c0474f68beea08f3177b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in asios.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9de41cd145f6fc73566a02847dc79c1f7237e2aa159ac104f24fed3b920ea24b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wrb3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08d88ef4850c22d9aecb5ddb11ae54339766a852526d80394aea04b92d91aaf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vss-web-auth-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70dc7c0837db09d1f3b1d98483b9ce346b56d8ea5ae46ee6b2d974d8be75ea26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dt-automation-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6eeff9a72134c244b969bcd674f473359fea30bfe4423298194db75e255a238 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grafana-polystat-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16c78bb4eab009d5ca0b36e692021c2f9d402df7bef90eb6642dee10f8e69095 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mark-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d23383a480fcca63e03f17e636f2b8b0ac1605237d730c7ccf159e9ea082f39d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-tsauditlog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 830e528439887027d65ed0697132b3f91dc2b11e553dc12671446d5f6eea1b2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SAP S/4HANA 安全漏洞

SAP S/4HANA is an enterprise resource management software based on the SAP HANA in-memory database system from SAP, Germany. A security vulnerability exists in SAP S/4HANA that originates from remote code execution and could lead to complete control of the system...

Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server

CVE-2025-47812 Improper input validation led to Remote Code Ex...

Malicious code in lz-evm-sdk-v1 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 171ea15aa901dba5305f361a9f0a2958fcbe7926518fa9f2467bf687b3a18c13 Any computer that has this package installed or running should be considered...

Malicious code in regex-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b936ae131832162bed5acdfe48c28a3ce6537c1fc7a50b579166c37116b7d358 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in emerson-angular-trove (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3710a484d9498defd18d6636486ebe053b8e10147655e6735b1d3769cb3a8676 Any computer that has this package installed or running should be considered...

Malicious code in test4-ross4 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1256f1681d37e739f697f2ec935fbe38c8daee3a0979753bc49f82dca162a841 Any computer that has this package installed or running should be considered...

Malicious code in jsonwepjoken (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2597a5128b2b0328c056ce8b33af7f29686d36f80c3e90742da9645ae8d57351 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in thunderbolt-features-loaders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee3eda7524a24da1ec85916ab8b93146e2e1399af30190b04b9021b0edbf7d61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @evoplay-spinential/test-module (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad89d688671d0118dbcde38aeb62e434fef8e3cae3aed2f114f8553caecefa29 Any computer that has this package installed or running should be considered...

📄 ABB Cylon Aspect 3.08.04 DeploySource Unauthenticated Remote Code Execution

ABB Cylon Aspect BMS/BAS version 3.08.04 is vulnerable to a critical flaw in the AuthenticatedHttpServlet within its application server, enabling remote attackers to bypass authentication by setting the Host: 127.0.0.1 header. This deceives the server into processing requests as if they originate...

CVE-2025-41651

Due to missing authentication on a critical function of the devices an unauthenticated remote attacker can execute arbitrary commands, potentially enabling unauthorized upload or download of configuration files and leading to full system compromise...